<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><blockquote type="cite"><div text="#000000" bgcolor="#FFFFFF"><blockquote cite="mid:6FB24855-BCA6-4C8A-8571-05F399787CC6@redhat.com" type="cite"><div><div><blockquote type="cite"><div><blockquote type="cite">Realm new user / edit user: <a moz-do-not-send="true" href="https://gatein.mybalsamiq.com/projects/keycloak/Realm%20new%20user">https://gatein.mybalsamiq.com/projects/keycloak/Realm%20new%20user</a><br>
              </blockquote>
              I am not sure if I understand correctly 'By clicking it,
              the fields "Current password" and "New password" appear'.
              Does that mean that to change password administrator needs
              to know old password of user? I don't think that it is
              possible as in underlying backend model (Picketlink) are
              passwords saved hashed and salted, so administrator
              couldn't know the original password of user.<br>
            </div>
          </blockquote>
          <div>So for admins we should only display the "New password"
            field, correct?&nbsp;</div>
          <div>Should we display "Current password" whenever the user is
            trying to update his own password?</div>
        </div>
      </div>
    </blockquote>
    hmm... not sure if it's necessary as user would have possibility to
    change his password in Keycloak UI, but he needs to authenticate to
    Keycloak before he can go there, which means that he already
    provided his password during Keycloak authentication. It may be also
    possible that some user wants to setup his password even if he
    doesn't have any "current password" (For example if he register to
    Keycloak through social network)<br></div></blockquote><div>Actually this is a requirement. The prototype is here:&nbsp;<a href="https://gatein.mybalsamiq.com/projects/keycloak/Linda%20change%20password">https://gatein.mybalsamiq.com/projects/keycloak/Linda%20change%20password</a></div><div>I guess this screen would be slightly different in case of having no password :)</div><div><br></div><div>Gabriel</div></div><div><br></div><div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">--</div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Gabriel Cardoso<br>GateIn Portal | User Experience Designer</div></div></body></html>